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What is claimed is: 



1 1 . A method for processing communication in a communication device 

2 having a first interface and a second interface comprising: 

3 accepting data packets at the first interface; 

4 for each accepted packet, identifying one of a plurality of classes of data flows 

5 associated with said packet; 

6 for at least some of the accepted packets queuing said packets according to the 

7 identified class for said packet; and 

8 transmitting the accepted packets from the second communication interface 

9 according a policy for priority and bandwidth allocation associated with the plurality of 
10 classes of data flows. 

1 2. The method of claim 1 wherein identifying the class of data flows includes 

2 examining network layer addressing data in the accepted packet. 

1 3. The method of claim 1 wherein examining network layer addressing data 

2 includes identifying destination network layer addresses of the packets. 

1 4. The method of claim 2 wherein identifying the class of data flows includes 

2 examining application layer data in the packets. 

1 5. The method of claim 1 further comprising, for at least some other of the 

2 accepted packets, passing the accepted packets to a proxy application hosted in the 

3 communication device. 

1 6. The method of claim 5 wherein the destination network layer addresses for 

2 the accepted packets that are passed to the proxy application are addresses of devices 

3 other than the communication device and that are accessible through the second interface, 

4 whereby the packets are intercepted by the communication device without being 

5 addressed to the communication device by the originators of the packets. 
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1 7. The method of claim 5 wherein information in the packets passed to the 

2 proxy application is transmitted from the second interface in packets with source network 

3 layer addresses associated with the communication device. 

1 8. The method of claim 5 wherein information in the packets passed to the 

2 proxy application is transmitted from the second interface in packets with source network 

3 layer addresses equal to the source network layer addresses of corresponding accepted 

4 packets. 

1 9. The method of claim 5 further comprising, for the packets that are passed 

2 to the proxy application, queuing records associated with the accepted packets, and 

3 transmitting packets from the proxy application according to the queued records. 

1 10. The method of claim 1 wherein the communication device communicates 

2 with devices over the first interface and the second interface as a data link layer bridge. 

1 11. The method of claim 1 0 wherein the accepted packets are transmitted 

2 without modification of their source and destination network layer addresses. 

1 12. The method of claim 1 further comprising accepting a specification of the 

2 policy using a graphical user interface. 

1 13. The method of claim 1 further comprising displaying data related to the 

2 utilization of bandwidth allocated to the classes of data flows on the graphical user 

3 interface. 

1 14. The method of claim 1 further comprising operating the communication 

2 device in a second mode, including passing packets between the first interface and the 

3 second interface without modification. 
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1 15. The method of claim 14 wherein operating in the second mode further 

2 includes monitoring the packets passing between the first interface and the second 

3 interface. 

1 16. The method of claim 1 5 wherein monitoring the packets includes 

2 identifying a class of data flows associated with each packet. 

1 17. The method of claim 1 further comprising operating the communication 

2 device in a third mode, including directly connecting the first interface to the second 

3 interface. 

1 18. The method of claim 17 further comprising switching to the third mode of 

2 operation in the event of a fault at the communication device. 

1 19. A communication device comprising: 

2 a plurality of network interfaces, including a first network interface, and a second 

3 network interface, wherein the communication device is configured to pass packets 

4 belonging to a plurality of classes of data flows between the network interfaces according 

5 to a programmable policy; 

6 a plurality of queues, each associated with a different one of the classes of data 

7 flows, for accepting packets from the first network interface; 

8 configuration data, including a configurable policy for the classes of data flows, 

9 wherein the configurable policy for a flow includes a bandwidth parameter and a priority 

10 parameter; and 

1 1 a scheduler for determining when to dequeue data packets queued in the plurality 

12 of queues, wherein the scheduler is configured according to the bandwidth parameters 

13 and the priority parameters for the classes of data flows. 

1 20. The device of claim 19 wherein the device includes the capability to 

2 functions as a data link layer bridge when passing data packets between the network 

3 interfaces. 
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1 21. The device of claim 1 9 further comprising a proxy application for 

2 processing data accepted at the first interface. 

1 22. The device of claim 21 further comprising a cache for servicing requests 

2 in data processed by the proxy application. 

1 23. The device of claim 1 9 further comprising a bypass switch for coupling 

2 the first interface to the second interface in a second operating mode. 

1 24. The device of claim 23 wherein the bypass switch includes a hub for 

2 coupling the first interface to both the second interface and to a processor of the 

3 communication device, whereby data passing between the first interface and the second 

4 interface can be monitored by the communication device without modifying the 

5 communication. 
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